Security audit
Power Oracle
Security checks across malware telemetry and agentic risk
Overview
Power Oracle has a coherent workout-calculation purpose, but it should be reviewed because it can guide an agent through a paid x402 API request without clearly requiring user approval first.
Install only if you are comfortable sending workout and body details to api.workcapacity.io. If using a payment-capable wallet, require the agent to show the current price and get your explicit approval before any paid compute retry.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.